Procura legal documents

Scope and roles

This policy applies to Procura users acting as Buyers, Suppliers, Country Admins, or Global Admins in the Philippines, Indonesia, Singapore, Cambodia, Laos, Timor-Leste, and Papua New Guinea.

Procura provides a structured procurement platform. The organization operating Procura is responsible for the service and for maintaining Procura's designated privacy/contact channel. Privacy requests may be handled through an authorized privacy representative of that organization; this policy does not identify or require a named individual. Business users remain responsible for the lawfulness of information they submit about their personnel, representatives, and transactions.

Information processed

Account and identity data may include an email address, display name, authentication-provider identifiers, email-verification state, multi-factor enrollment metadata, role, account status, selected country, language, and session timestamps. Passwords are handled by Procura's authentication service and are not stored in Procura profile records.

Business and profile data may include a name or company name, representative, category, contact number, address, structured official location codes and names, supplier description, avatar, supplier logo, supplier brochure or catalog images, a reusable signature record, and supplier verification records. Image and signature files are stored as protected objects, while their paths, URLs, versions, and related metadata may be stored in profile or audit records. Supplier verification uses business registration, tax registration, government-issued registration, permits, or equivalent documents required in the applicable country.

Procurement data includes RFQs, structured items and quantities, categories, deadlines, delivery locations, payment terms, quotations, prices, VAT and warranty selections, awards, purchase orders, acknowledgments, signatures, generated documents, ratings, archives, and related audit metadata.

Communication, service, and security data may include post-award messages, notifications, reports or feedback and optional screenshot evidence, Usage Credit ledger entries, payment intent and provider-reference metadata, subscription status, push tokens and platform type, IP-derived country, request and idempotency records, rate-limit records, and security or administrative audit events.

Purposes and lawful bases

Procura processes information to create and secure accounts; match RFQs to eligible Suppliers; support quotations, awards, purchase orders, signatures, messaging, verification, credits, subscriptions, notifications, reports, administration, and account deletion; prevent abuse; comply with law; and establish or defend legal claims.

Depending on the context and applicable law, processing may be necessary to perform the platform agreement, comply with legal obligations, pursue legitimate interests such as platform security and fraud prevention, or act on consent where consent is required. Withdrawing consent does not invalidate prior lawful processing and may not stop processing supported by another lawful basis.

Identity protection and disclosure

Before award, the Buyer quotation view is designed to conceal the Supplier's identity, and RFQ inputs are checked to reduce premature disclosure of email addresses and telephone numbers. Eligible Suppliers receive the procurement information needed to respond, subject to role, category, country, and privacy controls. A Supplier with an active Premium subscription may also receive the Buyer's available profile and contact details for a relevant RFQ before award.

After award, the Buyer and selected Supplier may receive each other's permitted business contact details and gain access to their awarded conversation and purchase-order workflow. Losing Suppliers may be told the winning company name after the configured delay, but do not receive the winner's contact details or the Buyer's protected contact details through that notice.

Service providers and international processing

Procura uses service providers for account authentication, data storage, file handling, notifications, application protection, and image-text screening. A country-detection service may compare the selected country with an IP-derived country. Google and Facebook may process data when a user chooses those configured sign-in methods.

Transactional messages may be delivered through Procura's email service, with delivery-event handling, bounded retries, suppression, and authorized administrative review where those features are enabled. Payment verification controls are implemented, but paid checkout remains unavailable until the applicable provider is approved, configured, and enabled. Provider-specific processing begins only when a service is enabled. Information may be processed outside the user's country; Procura must complete and document appropriate processor agreements and transfer safeguards appropriate to the applicable countries.

The Android application may display third-party advertising on Buyer and Supplier dashboard overview pages. Advertising is kept outside authentication, administration, payment, RFQ and quotation submission, award, declaration, signature, and purchase-order workflows. The advertising provider may process device, advertising identifier, consent, interaction, and approximate-location information according to the user's choices and applicable law. Users can continue using core procurement features when advertising consent is not granted. Procura does not claim to sell personal information.

Retention and deletion

Approved supplier verification images are scheduled for deletion one day after approval; declined verification images are scheduled for prompt deletion. Related upload metadata is scheduled for deletion after thirty days, while the verification decision or certificate may remain as an audit record.

A verified Buyer or Supplier may request account deletion through Settings after a recent secure sign-in and confirmation. The account, profile, eligible avatar, logo, brochure or catalog objects, drafts, notifications, and push tokens are deleted, scheduled for deletion, or de-identified by the deletion workflow. Accepted declarations, transaction signatures, and their integrity records are not treated as ordinary editable profile images. Open Buyer RFQs are archived and participant identities are anonymized where necessary.

Procurement, award, purchase-order, payment, declaration, signature, and related records may be retained for seven years. Awarded chat records and trust-and-safety reports or evidence may be retained for two years. Notifications are scheduled for cleanup after one year, and deletion-request metadata after one year. A legal hold may pause deletion. One month after award, the Buyer-side awarded Supplier entry and Buyer access to the related chat are removed without deleting the underlying award or legally retained records.

Rights and safeguards

Subject to applicable law, individuals may request access, correction, objection, restriction, portability, or deletion, and may complain to the relevant privacy authority. A request may require identity verification and may be limited by legal retention, other persons' rights, fraud prevention, or legal claims.

Requests should be submitted through Procura's designated privacy/contact channel once that channel is published. An authorized privacy representative may verify the requester's identity and coordinate the organization's response.

Procura uses provider-managed encryption in transit and at rest, role and country access controls, service authorization, application protection, multi-factor authentication, bounded sessions for Admins, file validation, rate limits, idempotency, and audit records. No system can guarantee absolute security.

Eligibility and accounts

A user must be legally capable of acting for the person or business represented, provide accurate information, select a supported country that passes the configured country check, protect account credentials, complete required verification, and use multi-factor authentication where the application requires it.

Buyer, Supplier, Country Admin, and Global Admin permissions are separate. A user must not access another role, country, account, document, or transaction without authorization. Registration does not guarantee supplier approval or continued access.

Procurement workflow

Buyers create structured RFQs. Eligible Suppliers may receive and respond with structured quotations. A Buyer may select a Supplier, after which the parties can use the awarded messaging and purchase-order workflow. Closing a quotation preserves a submitted quotation; cancelling it marks it cancelled and removes it from the Buyer's available quotation list.

The Buyer controls award selection. Procura structures and records the workflow but is not the Buyer, Supplier, manufacturer, carrier, escrow agent, or guarantor. The parties remain responsible for specifications, pricing, taxes, delivery, quality, legal compliance, and payment between them.

Usage Credits, subscriptions, and payments

Newly registered users currently receive thirty Usage Credits once. Procura's trusted ledger applies the currently configured charges for actions such as RFQ submission, quotation submission, award, and purchase-order actions. Supplier RFQ receipt or access currently has no Usage Credit charge. The authoritative amount shown before an action and recorded by the service controls over older descriptions.

Country-specific credit packages and a one-month Supplier subscription are present in Procura's current catalog. Payment and subscription checkout are currently disabled until a verified provider handoff is configured. Displaying a package does not mean it can currently be purchased. If enabled, purchases and activation are verified, transactional, and protected from duplicate processing. An active Supplier Premium subscription permits access to the available Buyer profile and contact details for relevant RFQs before award. A subscription does not remove ordinary Usage Credit charges.

Usage Credits are platform-use units, not money, a deposit, a stored value facility, or a promise of procurement success. Refund, expiry, tax, and consumer terms must be finalized and displayed before paid checkout is enabled in any country.

Documents and electronic signatures

Authorized users may draw and confirm electronic signatures for approved declarations, quotations, purchase orders, acknowledgments, and completion records. A saved signature is used for a document only after the signer's explicit confirmation. Audit metadata and a document hash may be retained with the signed record.

A Supplier Declaration and Undertaking is selected for the Supplier's authoritative account country. Procura records the country, declaration version, and acceptance date and time. An accepted declaration is read-only and remains viewable to the Supplier and other authorized participants. If Procura issues a materially updated version, the Supplier must separately review, accept, and sign that version before continuing Supplier participation.

Each signer is responsible for reviewing the complete document, having authority to sign, and retaining any additional records required by law. Procura does not guarantee that an electronic record satisfies every formality in every jurisdiction.

Administration and enforcement

Country Admins operate only within their assigned country. Country Admin rejection or suspension requests require a recorded reason and Global Admin approval before becoming final. The Global Admin manages cross-country controls, Country Admin assignments, and authorized credit adjustments. Administrative actions are audited.

Procura may restrict an account or workflow to protect users, investigate fraud or abuse, comply with law, or preserve platform integrity. A global procurement freeze may temporarily stop affected actions during an incident without deleting existing records.

Availability, liability, and governing terms

Services may be interrupted by maintenance, connectivity, provider failure, security response, or events outside reasonable control. Procura does not promise uninterrupted service, a specific Supplier, quotation, award, delivery, saving, revenue, or outcome.

Any warranty disclaimer, limitation of liability, indemnity, governing-law clause, dispute forum, arbitration term, or class waiver must be reviewed and approved by qualified counsel for each supported country before publication.

Acknowledgement

By affirmatively accepting during registration or another clearly identified step, the user confirms having read the Privacy Policy and authorizes optional processing that applicable law requires to be based on consent.

The user confirms authority to provide business-representative and transaction information submitted to Procura and will not upload another person's personal information without a lawful basis and appropriate notice.

Necessary processing

Account security, procurement execution, fraud prevention, audit integrity, legal retention, and compliance processing may rely on contract, legitimate interests, or legal obligations rather than consent. Refusing optional consent will not authorize Procura to stop processing that remains lawfully necessary.

Withdrawal and choices

Consent may be withdrawn through the relevant setting or through Procura's designated privacy/contact channel once published. An authorized privacy representative may verify and process the request on behalf of the operating organization. Withdrawal applies prospectively and may make an optional feature unavailable. Account deletion is a separate secured process and does not erase records subject to legal hold or documented retention.

Platform role

Procura provides software for structured sourcing and procurement. It is not a party to the sale, does not take title to goods, does not inspect every product or site, and does not guarantee a user's identity, authority, solvency, performance, or compliance.

A verification decision means only that the submitted evidence was reviewed through Procura's verification process. It is not an endorsement, certification of all facts, credit assessment, warranty, or substitute for due diligence.

User decisions

Buyers and Suppliers must independently verify specifications, availability, prices, taxes, licenses, product safety, delivery, insurance, authority, and contract terms. Rankings, badges, notifications, and generated documents are decision support and recordkeeping tools, not legal, tax, financial, or professional advice.

Service limitations

Automated contact-information screening, image processing, notifications, localization, country detection, and generated documents can be delayed or imperfect. Users must review all entries and documents before relying on or signing them.

Permitted use

Use Procura only for lawful business procurement, supplier participation, administration, and related records within the permissions assigned to the account and country.

Prohibited conduct

Users must not submit false identities, forged documents, sham RFQs, collusive quotations, manipulated prices, counterfeit or illegal goods, malware, executable uploads, harassment, discriminatory content, intellectual-property infringement, or content that violates privacy or law.

Users must not bypass pre-award anonymity, insert disguised contact details such as written-out email domains or telephone numbers, scrape or enumerate accounts, access another user's objects, probe security controls, automate abusive traffic, replay requests, manipulate Usage Credits, rankings, awards, payments, or signatures, or interfere with service availability.

Reports and enforcement

Procura may validate submissions, preserve audit evidence, apply rate limits, quarantine or reject files, restrict workflows, and investigate reports. Enforcement is subject to the role and approval controls described in the Account Suspension and Termination Policy.

Essential technology

The web application uses essential storage to restore a signed-in session. It prefers local persistence and may fall back to session or in-memory persistence. Procura also stores selected country, language, and certain accessibility or application preferences on the device.

Procura's application protection and configured Google or Facebook sign-in may use cookies, local storage, device signals, or similar technology controlled by those providers for security and authentication.

Advertising choices

The Android application may request consent before displaying third-party advertising. Where required, users can revisit advertising privacy choices from Settings. Ads are not required to use core procurement workflows. Procura does not use cross-site behavioral advertising for its web procurement workflows.

Managing storage

Browser settings can clear or block storage, but doing so may end a session, prevent secure sign-in, reset preferences, or make protected features unavailable. Mobile applications may use equivalent secure application storage rather than browser cookies.

Safeguards

Procura uses protected authentication, verified email, required time-based one-time-password enrollment for protected account entry, role and country authorization, trusted validation, data and file access controls, application protection, rate limits, duplicate-request protection, file type and image validation, security headers, and auditable privileged actions.

Global Admin sessions are bounded to three hours and Country Admin sessions to fifteen minutes after the required secure sign-in. Stale privileged access is rejected by trusted access checks. Provider services protect stored and transmitted data using their managed encryption controls.

User responsibilities

Users must secure their email account, password, authenticator, device, recovery methods, and signed-in sessions; review account activity; avoid sharing credentials; and promptly report suspected compromise through the official security channel once published.

Limitations and incident response

No system is invulnerable. Procura does not guarantee that every threat, outage, or unauthorized action can be prevented or detected. Security controls are reviewed and improved as the service evolves.

Procura will assess suspected incidents and provide notices required by applicable law after the responsible operating organization, its authorized privacy representative, incident contacts, and response procedure are formally approved.

Fraudulent conduct

Fraud includes false or stolen identity, forged verification or transaction documents, sham procurement, collusive or deceptive quotations, award manipulation, duplicate or replayed charges, credit manipulation, signature misuse, counterfeit goods, misrepresentation, and attempts to bypass platform controls.

Review controls

Procura uses supplier verification, structured workflows, contact privacy screening, role and country controls, transactional ledgers, idempotency, rate limits, reports with evidence, document and action audit trails, and administrative review. These controls reduce risk but do not guarantee that fraud will be detected or prevented.

Procura does not claim an automated fraud score, third-party background investigation, site inspection, law-enforcement database match, or guaranteed real-time anomaly detection.

Investigation and decisions

Procura may preserve relevant records, restrict access, request additional evidence, and refer a substantiated matter when legally required. Country Admin suspension or rejection recommendations require a reason and Global Admin approval before final action.

Procura materials

Subject to verified ownership and third-party licenses, Procura's software, interface, branding, templates, illustrations, and documentation are protected by applicable intellectual-property law. Access to the service grants only a limited, revocable, non-transferable right to use those materials for authorized Procura activity.

User content

Users retain their rights in lawful content they submit. They grant Procura only the license reasonably necessary to host, secure, validate, transform, generate documents from, disclose to authorized workflow participants, preserve, and otherwise operate the service or meet legal obligations. This policy does not grant Procura a separate advertising or promotional license.

A user must have rights to all names, logos, documents, images, descriptions, quotations, signatures, and other content submitted and must not remove ownership notices or misuse another party's marks.

Generated records

Generated RFQ, quotation, award, and purchase-order documents may contain platform templates and user-provided transaction data. Users may use their authorized copies for the relevant procurement and recordkeeping purpose, subject to third-party rights and law.

Submitting a notice

Once Procura publishes an official copyright contact, a rights holder may submit the claimant's name and authority, identification of the protected work, the exact Procura content or record at issue, a reliable location or document identifier, contact details, supporting evidence, and a good-faith statement that the challenged use is unauthorized.

Procura does not currently implement a dedicated takedown portal or published copyright mailbox. No unofficial address should be treated as the formal channel.

Review and preservation

Procura may request more information, preserve an audit copy, temporarily restrict access, notify the submitting user where appropriate, and restore or remove access after review. Records subject to procurement retention, legal hold, fraud review, or a legal claim may be preserved even if they are no longer shown in ordinary interfaces.

Counter-notice and repeat issues

A challenged user may provide ownership, license, authorization, or other relevant evidence through the published channel. Repeat or deliberate infringement may lead to restriction under the Acceptable Use and Suspension policies. Qualified counsel must approve country-specific notice and counter-notice requirements under applicable law.

Reasons for restriction

An account or workflow may be restricted for verification failure, fraud or abuse, false information, prohibited content, security risk, unauthorized access, legal obligation, material breach, or action needed to protect users or platform integrity.

Decision authority

Country Admins may review activity within their assigned country and submit a suspension or rejection request with a reason. That request is not final until approved by the Global Admin. Global Admin actions, approvals, and authorized account changes are recorded in audit logs.

A temporary global procurement freeze may stop affected actions during a security or operational incident. A freeze does not itself delete an account or transaction history.

Notice and review

Where lawful and safe, Procura should provide a human-readable reason for a final restriction. The current implementation does not provide a complete user appeal case-management workflow or response deadline. Those processes and an official appeal channel will be communicated through Procura's official contact channels.

User-requested deletion

Eligible Buyers and Suppliers can request deletion in Settings after a recent email-verified, multi-factor sign-in and typed confirmation. Deletion removes the authentication account and eligible personal data while de-identifying or retaining procurement, audit, fraud, signature, declaration, payment, and legal records for the periods described in the Privacy Policy.

Official channels

Users should rely only on contact information shown inside Procura or on the official Procura website. Customer-support and privacy communications may be sent to support@procura.ph and handled by an authorized privacy representative of the organization; these documents do not require or identify a named individual.

Users should not send passwords, one-time codes, private keys, or unnecessary identity documents by email or social media.

Legal notices

A formal notice should identify the sender, account or organization, country, relevant transaction or document identifiers, the requested action, supporting evidence, and a reliable reply address. Procura may verify identity and authority before disclosing protected information or acting on a request.

Applicable legal framework

For Philippine operations, relevant laws may include Republic Act No. 10173 (Data Privacy Act of 2012), Republic Act No. 8293 (Intellectual Property Code), and Republic Act No. 8792 (Electronic Commerce Act), together with implementing rules and other applicable law. Their application, governing-law terms, forum, electronic-signature formalities, and obligations in every supported country require qualified professional review.